EUVD-2025-198346

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use...

CVE-2025-52671

CVE-2025-52671 describes an information-disclosure vulnerability in Revive Adserver where SQL error messages reveal debugging details, enabling non-admin users to learn software, PHP, and database versions. Connected sources (CNVD, RH, EUVD, NVD, OSV, CVE/CVEList, and a HackerOne report) consiste...

firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...

Google Chrome V8 Engine Code Execution

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

Revive Adserver security vulnerability

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from an...

TencentOS Server 3: gimp:2.8 (TSSA-2025:0473)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0473 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PT-2026-37492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hid-pl component where errors during initialization are not properly reported. This failure to handle probe errors can lead to a NULL pointer dereference the first...

Cloudflare Outage Jolts the Internet – What Happened, and Who Was Hit

Cloudflare outage causes slow sites, login trouble and dashboard errors as users report problems even after the company says service is restored...

Google Chrome DevTools Sandbox Bypass

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to bypass the sandboxing protection mechanisms...

Google Chrome Intents UI Replacement

The vulnerability of Google Chrome’s Intents component is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

Asterisk Resource Management DoS

The vulnerability of the Asterisk IP telephony management system is related to errors in resource management. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

ZenCount Visitor Counter Data Compromise

The vulnerability of the ZenCount visitor counter is related to errors in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

lib/kunit/executor_test.c Heap Buffer Overflow DoS

The vulnerability of the kfreeatend function in the lib/kunit/executortest.c module of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Linux I2C Driver Buffer Overflow DoS

The vulnerability of the i2cacpinotify function in the drivers/i2c/i2c-core-acpi.c module of the Linux I2C driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ZenCount Visitor Counter Data Compromise

The vulnerability of the ZenCount visitor counter is related to errors in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

SAP NetWeaver Privilege Bypass

The vulnerability of the SAP NetWeaver software integration platform is related to errors in privilege management. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read, modify, or delete access to confidential data...

IndustryPack device support driver Heap Buffer Overflow Info Disclosure

The vulnerability of the ipoctalinstslot function in the module drivers/ipack/devices/ipoctal.c of the IndustryPack device support driver for the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected informati...

Linux asus_wmi_register_driver Heap Buffer Overflow DoS

The vulnerability of the asuswmiregisterdriver function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Windows Speech Privilege Escalation

The vulnerability of the Windows Speech component in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Speech Runtime Privilege Escalation

The vulnerability of the Windows Speech Runtime component in operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...